Route Origin Authorization

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9b8b992-0c3e-3e6e-ba53-fd3a03b61a4b.roa
File:                     d9b8b992-0c3e-3e6e-ba53-fd3a03b61a4b.roa (raw, json)
Hash identifier:          Ifni9LCLL+kkXconT2fhriwjJeMvEDr5dziCfIfF9Og=
Subject key identifier:   49:A3:74:73:82:BF:3A:75:24:11:B4:9B:9D:AD:B0:5D:DE:35:EC:46
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584F06725526C0A85B5B315A2200
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9b8b992-0c3e-3e6e-ba53-fd3a03b61a4b.roa
Signing time:             Tue 01 Sep 2026 01:00:12 +0000
ROA not before:           Tue 01 Sep 2026 01:00:12 +0000
ROA not after:            Mon 30 Nov 2026 02:00:12 +0000
asID:                     6167
IP address blocks:        97.133.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:06:72:55:26:c0:a8:5b:5b:31:5a:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Sep  1 01:00:12 2026 GMT
            Not After : Nov 30 02:00:12 2026 GMT
        Subject: CN=b8c3bbb6-7cd3-4ce6-aefc-eccbb0d79a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9f:d2:e2:52:16:eb:21:df:35:12:5e:f8:5a:
                    d1:49:c5:33:62:4f:ba:2b:38:64:1b:10:4d:2a:fa:
                    06:6e:03:f8:62:4d:2e:fd:9e:36:86:97:53:d9:e7:
                    5b:95:d0:b0:3c:10:8d:6f:af:09:e5:69:c6:11:a9:
                    20:57:83:73:43:f7:89:40:3c:45:36:ca:4f:84:ea:
                    45:8b:d4:44:55:cc:96:57:9f:1c:02:3e:97:80:72:
                    c9:45:c3:b9:2e:d5:d5:ab:be:30:73:af:1b:84:1a:
                    55:ee:98:e0:36:4a:7c:45:31:d0:ca:7c:8f:4d:4d:
                    74:b3:3f:21:6d:94:f3:03:89:7f:49:77:6b:dd:b2:
                    ce:17:09:ea:a6:e7:29:36:c5:9e:28:d2:96:9f:51:
                    32:8c:18:f7:35:2c:7c:61:a2:3f:54:36:1a:e3:57:
                    d4:f6:77:f1:96:80:e0:ec:12:ad:ee:60:f3:e8:69:
                    cf:38:e8:be:af:1f:cb:ee:4d:7f:13:08:82:2f:3f:
                    8b:ad:58:8d:c4:e4:8d:8b:04:24:92:30:0b:15:88:
                    f9:fb:54:6d:98:38:39:5d:22:57:16:46:a7:7a:b8:
                    ed:0a:37:de:f7:7e:dc:c9:d2:5d:76:03:c4:32:40:
                    5b:9f:b2:b2:f2:79:00:ef:df:40:ba:35:91:24:4a:
                    1e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A3:74:73:82:BF:3A:75:24:11:B4:9B:9D:AD:B0:5D:DE:35:EC:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/d9b8b992-0c3e-3e6e-ba53-fd3a03b61a4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  97.133.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e5:18:ea:a0:69:1d:22:db:5c:a4:a5:f6:c6:24:7c:fd:3d:
         e5:cc:25:aa:66:17:d7:9f:02:e1:35:5c:7c:99:7c:7b:ed:84:
         77:7e:f4:1e:d2:ea:a0:c5:09:59:ca:37:09:e7:6c:8e:e7:34:
         91:01:d5:32:16:0f:cb:a0:63:87:f2:3f:9c:c3:81:3e:01:2f:
         e4:00:d6:a0:2b:26:b0:92:c7:31:83:46:45:be:47:88:9b:f7:
         89:84:ad:0c:0e:ac:c1:d0:81:ab:d1:81:e2:8b:38:bc:28:e8:
         8d:77:d9:04:8b:75:47:10:f6:51:72:6f:12:f8:0b:56:04:68:
         14:de:e0:20:c7:a1:78:73:b2:43:f7:fa:a5:e0:d0:51:d0:be:
         eb:de:09:80:93:e9:c3:94:58:77:54:fd:cf:65:69:dc:de:08:
         e6:12:54:ad:db:5a:81:3f:40:d9:14:db:93:3a:eb:62:7f:84:
         3f:eb:0a:7e:4c:46:f3:31:c1:f7:29:b3:71:40:fd:33:fb:8e:
         44:65:cf:fb:80:9f:d6:19:40:03:ef:ce:80:cb:60:48:75:7e:
         e7:3b:37:28:38:95:08:1b:8e:55:28:94:4d:9a:17:3b:fb:1a:
         c2:57:62:d1:bb:23:b7:99:02:f7:5e:04:88:a3:92:4e:ea:93:
         69:7c:73:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8GclUmwKhbWzFaIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk
YjhjM2JiYjYtN2NkMy00Y2U2LWFlZmMtZWNjYmIwZDc5YTg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5/S4lIW6yHfNRJe+FrRScUzYk+6KzhkGxBN
KvoGbgP4Yk0u/Z42hpdT2edbldCwPBCNb68J5WnGEakgV4NzQ/eJQDxFNspPhOpF
i9REVcyWV58cAj6XgHLJRcO5LtXVq74wc68bhBpV7pjgNkp8RTHQynyPTU10sz8h
bZTzA4l/SXdr3bLOFwnqpucpNsWeKNKWn1EyjBj3NSx8YaI/VDYa41fU9nfxloDg
7BKt7mDz6GnPOOi+rx/L7k1/EwiCLz+LrViNxOSNiwQkkjALFYj5+1RtmDg5XSJX
FkanerjtCjfe937cydJddgPEMkBbn7Ky8nkA799AujWRJEoeQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEmjdHOCvzp1JBG0m52tsF3eNexGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZDliOGI5OTItMGMzZS0z
ZTZlLWJhNTMtZmQzYTAzYjYxYTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGYYXAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHjlGOqgaR0i21ykpfbGJHz9PeXMJapmF9efAuE1XHyZfHvthHd+9B7S
6qDFCVnKNwnnbI7nNJEB1TIWD8ugY4fyP5zDgT4BL+QA1qArJrCSxzGDRkW+R4ib
94mErQwOrMHQgavRgeKLOLwo6I132QSLdUcQ9lFybxL4C1YEaBTe4CDHoXhzskP3
+qXg0FHQvuveCYCT6cOUWHdU/c9ladzeCOYSVK3bWoE/QNkU25M662J/hD/rCn5M
RvMxwfcps3FA/TP7jkRlz/uAn9YZQAPvzoDLYEh1fuc7Nyg4lQgbjlUolE2aFzv7
GsJXYtG7I7eZAvdeBIijkk7qk2l8c0s=
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:31:04 2026 by rpki-client